Status of High-Risk Vulnerabilities
| No. | Vulnerability No. (CVE) | Content | CVSS | Risk Level |
|---|---|---|---|---|
| 1 | CVE-2026-41283 | OpenStack Mistral Unauthenticated RCE | 9.9 | CRITICAL |
| 2 | CVE-2026-47647 | Microsoft Dynamics 365 Access Control Privilege Escalation | 9.9 | CRITICAL |
| 3 | CVE-2026-56274 | Flowise Custom MCP Server OS Command Injection RCE | 9.9 | CRITICAL |
| 4 | CVE-2026-8206 | Kirki WordPress Plugin Account Takeover | 9.8 | CRITICAL |
| 5 | CVE-2026-47291 | Windows HTTP.sys Integer Overflow RCE | 9.8 | CRITICAL |
| 6 | CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection RCE | 9.8 | CRITICAL |
| 7 | CVE-2026-8025 | MOSK CBS Platform SQL Injection | 9.8 | CRITICAL |
| 8 | CVE-2026-7486 | Netcad E-İmar SQL Injection | 9.8 | CRITICAL |
| 9 | CVE-2026-12293 | Mozilla Firefox·Thunderbird WebGPU Use-After-Free RCE | 9.8 | CRITICAL |
| 10 | CVE-2026-54390 | JTL Shop Server-Side Template Injection RCE | 9.8 | CRITICAL |
Distribution of Web Application Attack Types
| No. | Attack Type | % | Key Features and Purpose |
|---|---|---|---|
| 1 | System File Access | 30.3 | Unauthorized attempts to access internal server files and directories |
| 2 | SQL Injection | 29.08 | Database manipulation, privilege escalation, and sensitive data exfiltration |
| 3 | Application Vulnerability | 16.92 | Exploitation of application-level flaws (insufficient authentication, misconfigurations) |
| 4 | Default Page | 9.74 | Collection of system information through exposure of default configuration pages |
| 5 | Directory Traversal | 6.28 | Attempts to access sensitive files through path manipulation |
Major Attack Detection by Industry
| No. | Industry | Total | First Attack Type | Second Attack Type |
|---|---|---|---|---|
| 1 | Education Industry | 4,450,000 cases | System File Access ~ 2,040,000 cases | Application Vulnerability – 900,000 cases |
| 2 | Service Industry | 3,800,000 cases | SQL Injection ~ 1,380,000 cases | Application Vulnerability – 820,000 cases |
| 3 | Public Institutions | 1,970,000 cases | SQL Injection ~ 770,000 cases | System File Access – 520,000 cases |
| 4 | Manufacturing Industry | 1,940,000 cases | System File Access ~ 540,000 cases | Default Page ~ 540,000 cases |
The Threat Intelligence Report provides the latest web vulnerability analyses, industry-specific attack patterns,
and key CVE-based vulnerability information, all based on processed data from the AI/ML-powered threat intelligence platform AILabs.
Subscribe to receive the full monthly Threat Intelligence Report!
[ Subscribe → ]
